32 matches found
Havoc-C2-SSRF-to-RCE
Havoc-C2-SSRF-to-RCE Это модифицированная версия SSRF PoC для CVE-2024-41570 от @chebuya, объединённая с эксплойтом auth RCE от @hyperreality. Этот эксплойт удалённо выполняет код на целевой системе из-за множества уязвимостей в Havoc C2 Framework...
Vuln_Exploitation_MegaQuagga_Pentest
Exploitation de vulnérabilités — Rapport de test d'intrusion MegaQuagga Analyste: Samuel Weiss Organisation: 0x2A Security Date: 20 avril 2026 Client: MegaQuagga Publishing Cible: www.megaquagga.local Classification: CONFIDENTIEL Aperçu Ce projet documente un test d'intrusion structuré mené contr...
CVE-2019-1003000_RCE-DETECTION
CVE-2019-1003000RCE-DETECTION Résumé général En enchaînant la vulnérabilité CVE-2018-1000861 avec CVE-2019-1003000, j'ai créé un module pour tester une RCE pré-authentification sur Jenkins CI. Initialement, j'avais essayé de détecter la vulnérabilité avec un nom d'utilisateur, un mot de passe et ...
CVE-2024-4157-SSRF-RCE-Reverse-Shell
CVE-2024-4157 : Obtenir un Reverse Shell sur Havoc C2 - Enchaînement SSRF avec RCE Obtenez un reverse-shell avec une IP et un Port locaux, en enchaînant CVE-2024-4157 POC avec havocauthrce Utilisation Informations de base $ python3 exploit.py usage: exploit.py -h -t TARGET -i IP -p PORT -A...
vuln-chain-3-4-14-demo
vuln-chain-spring-boot — a Trivy "green but owned" demo An in...
PYSEC-2026-1348 Fides' Admin UI User Password Change Does Not Invalidate Current Session
Summary Admin UI user password changes in Fides do not invalidate active user sessions, creating a vulnerability chaining opportunity where attackers who have obtained session tokens through other attack vectors such as XSS can maintain access even after password reset. This issue is not directly...
EUVD-2026-34899
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network attacker who can reach the server can forge valid download signatures and retrieve files from the...
Hunting-Bugs
2026 Practical Bug Bounty Guide Built on real-world experie...
CVE-2026-40552
CVE-2026-40552 affects mpGabinet ≤ 23.12.19 and describes a Remote Command Execution via processing an attachment. An authorized user with DB access can cause system command execution by uploading an attachment and modifying its storage path to reference an attacker-controlled remote resource, or...
EUVD-2024-0892
Malicious code in bioql PyPI...
CVE-2025-57766
CVE-2025-57766 affects the Fides open-source privacy engineering platform. Prior to version 2.69.1, when an admin UI password is changed, existing active sessions are not invalidated, allowing an attacker who has obtained a valid session token (for example via XSS or other vector) to maintain acc...
CVE-2023-3545
Improper sanitisation in main/inc/lib/fileUpload.lib.php in Chamilo LMS = v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of .htaccess file. This vulnerability may be exploited ...
CVE-2020-6844
In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...
CVE-2020-4005
VMware ESXi 7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate thei...
VulnCheck KEV: CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability...
CVE-2024-28850 WP Crontrol possible RCE when combined with a pre-condition
WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permissions documented here. While there is no known vulnerability...
CVE-2024-28850
WP Crontrol for WordPress can enable remote code execution if an attacker chains it with another vulnerability (e.g., a writeable SQLi or arbitrary wp_options updates) that grants control over PHP cron event parameters. The issue is not in the feature itself, but in how a pre-condition could allo...
CVE-2024-29019 ESPHome vulnerable to Authentication bypass via Cross site request forgery
ESPHome is a system to control microcontrollers remotely through Home Automation systems. API endpoints in dashboard component of ESPHome version 2023.12.9 command line installation are vulnerable to Cross-Site Request Forgery CSRF allowing remote attackers to carry out attacks against a logged...
Unsecured endpoints in the jupyter-lsp server extension
Impact Installations of jupyter-lsp running in environments without configured file system access control on the operating system level, and with jupyter-server instances exposed to non-trusted network are vulnerable to unauthorised access and modification of file system beyond the jupyter root...